It depends on the size of your environment and the money budgeted to implement the solution. I would start looking at the lower end sonicwalls that provide IDS, content filtering, and spam filtering at the perimeter. If that is too spendy there are open source solutions out there, but they are not as turn-key, but they can run on some older hardware. Untangle is one that I have deployed in the past for my church and its pretty feature rich for the cost (FREE).

While there are open source solutions out there, if this is to support a business they may prefer to go with a paid solution to get the phone technical support. Like I said it all depends.

Proxy is a little better to control and easier than NAT, but you tend to have more problems if you run into software that needs direct connection and is not a proxy-aware. You can't have NAT or Proxy without any third-party add-on to filter the content.

KevinCovert pretty much says it as far as content filtering and such -- barracuda is another good one.

For those of you actively in the Malware fightling business, we now have available an amazing new tool in the malware wars (first recommended to me by rpggamergirl (http://www.experts-exchange.com/M_3598771.html), the Zone Advisor for the Virus and …

After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…